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DETAILED ACTION 

1 . This office action is in response to Applicant's Request for Continued 
Examination (RGB) filed on May 25. 2005, Claims 1, 8, 18, 23, 27, 32 and 33 
have been amended. Claim 12 has been canceled. Claims 1-1 1 and 13-36 are 
pending. 

Response to Arguments 

2. Applicant's arguments with respect to amended claims have been 
considered but are moot in view of the new ground(s) of rejection. 

Claim Objections 

3. Claims 8, 18, 23, 32 and 33 are objected to because of the following 
informalities: 

Claims 8, 18, 23, 32 and 33 contain language, such as "may be suitable" , 
"attempt" or "attempting", that suggests or make optional but does not require 
steps to be performed or does not limit a claim to a particular structure. 
Therefore, these claims do not limit the scope of a claim or claim limitation. 

For claim 33, the phrase "...digital good will to ..." appears to be a 
typographical error. 

Appropriate correction is required. 



Claim Rejections - 35 USC § 103 
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4. The following is a quotation of 35 U.S.C. 103(a) which forms the basis for 
all obviousness rejections set forth in this Office action: 

(a) A patent may not be obtained though the invention is not identically disclosed or described 
as set forth in section 1 02 of this title, if the differences between the subject matter sought to 
be patented and the prior art are such that the subject matter as a whole would have been 
obvious at the time the invention was made to a person having ordinary skill in the art to which 
said subject matter pertains. Patentability shall not be negatived by the manner in which the 
invention was made. 

Claims 1-5, 7-15, 17-18, 20, 22-24 and 26-36 are rejected under 35 
U.S.C. 103(a) as being unpatentable over Yorke-Smith (U.S. Patent No. 
5,548,648) in view of Colberg et al. (U.S. Patent No. 6,6668,325, hereinafter 
Colberg) and further in view of Howard et al. (U.S. Patent No. 6,901 ,516, 
hereinafter Howard). 

In respect to claim 1, Yorke-Smith discloses a method comprising: 

receiving an original digital good; and applying various forms of protection 
to the original digital goods to produce a protected digital goods (see Abstract 
and col. 1, lines 48-67, col. 2, lines 50-65). 

Randomly applying various forms of protection to a plurality of segments 
of the original digital good to generate a plurality of protected segments to be 
included in a protected digital good (col. 4, lines 23-67); 

generating a plurality of checkpoints, each of the checkpoints being 
associated with at least one of the protected segments (col. 3, line 25-45). 

Assembling the protected digital good by collecting the plurality of 
protected segments (col. 5, lines 10-25). 

Yorke-Smith does not disclose but Colberg discloses at least two of the 
segments overlap one another wherein overlapping segments are different from 
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each other but include some identical data (see Colberg, e.g. Abstract and col. 1 , 
line 65-col. 2, line 10 (subset of code), loop subroutine or loop iteration 
commonly found in programming code contains some identical data, i.e. Fig. 20c, 
for (i=1,j<n,i++).-.for (i=1,i<n,i++)) . Therefore, it would have been obvious to 
one of ordinary skill in the art at the time the invention was made to implement 
Yorke-Smith's segmenting data with various encryption protection with Colberg's 
segments overlap another and other to enhance software security. 

Furthermore, Yorke-Smith and Colberg do not disclose However, 
Howard discloses a ciphering processing system may includes a module for 
generating an integrity check information (Howard, col. 3, lines 1-23). It would 
have been obvious to one of ordinary skill in the art at the time the invention was 
made to incorporate integrity check in ciphering process taught by Howard with 
the teaching of Yorke-Smith using a control block as a checkpoint to indicate the 
position and data format of the protected data segment to ensure protected 
digital good is not tampered after it has been encrypted. 

In respect to claim 2, Yorke-Smith, Colberg and Howard disclose a 
method as recited in claim 1 , wherein the randomly applying comprises pseudo 
randomly applying the various forms of protection according to pseudo random 
techniques (see Yorke-Smith, col. 4, lines 23-67). 

In respect to claim 3, Yorke-Smith, Colberg and Howard disclose a 
method as recited in claim 1 , wherein the applying comprises randomly selecting 
the forms of protection from a set of available forms of protection (see Yorke- 
Smith, col. 4, lines 23-67). 
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In respect to claim 4, Yorke-Smith, Colberg and Howard disclose a 
method as recited in claim 1 , wherein the applying comprises applying the 
various forms of protection to randomly selected portions of the original digital 
goods (see Yorke-Smith, col. 4, lines 23-67). 

In respect to claim 5, Yorke-Smith, Colberg and Howard disclose a 
method as recited in claim 1 . Colberg further disclose wherein the various forms 
of protection are selected from a group of protection tools comprising code 
integrity verification, acyclic code integrity verification, cyclic code integrity 
verification, secret key scattering, obfuscated function execution, 
encryption/decryption, probabilistic checking. Boolean check obfuscation, in- 
lining, reseeding pseudo random number generators with tune varying inputs, 
anti-disassembly methods, varying execution paths between runs, anti- 
debugging methods, and timespace separation between tamper detection and 
response (see Colberg, Abstract and coL 1, line 65-col. 2, line 10). 

In respect to claim 7, the claim limitation is a computer-readable medium 
claim which is substantially similar to method claim 1 and therefore the same 
rejection applied. 

In respect to claim 8, Yorke-Smith discloses a method comprising: 
segmenting a digital goods into a plurality of segments (see col. 3, lines 25-27); 
transforming data segments according to different protection techniques to 
produce a protected digital goods having a composite of variously protected 
segment (see col. 1, lines 58-67); 



Application/Control Number: 09/536,033 Page 6 

Art Unit: 2134 

Augmenting at least one segment using a certain protection technique; 
and inserting a checkpoint within the protected digital good but outside of the 
augmented segment and at a varying position relative to the augmented segment 
the checkpoint being suitable to determine position and data format of the 
augmented segment (col. 2, lines 37-64, col. 3, lines 25-41 and col. 4, lines 45- 
67). Yorke-Smith does not explicitly disclose but Colberg discloses selecting and 
transforming only the selected segments (see Abstract and col. 1, line 65-col. 2, 
line 9, select subset of code). It would have been obvious to one of ordinary skill 
in the art at the time the invention was made to incorporate the transformation of 
selected segment taught by Colberg with Yorke-Smith's teaching of segmenting 
and transforming digital goods in order to enhance software security based on 
desired level of obfuscation (see Colberg, Abstract). Furthermore, Yorke-Smith 
and Colberg do not explicitly disclose the control block is configure to used to 
evaluate a validity of the augmented segment. However, Howard discloses a 
ciphering processing system may includes a module for generating an integrity 
check information (Howard, col. 3, lines 1-23). It would have been obvious to 
one of ordinary skill in the art at the time the invention was made to incorporate 
integrity check in ciphering process taught by Howard with the teaching of Yorke- 
Smith using a control block as a checkpoint to indicate the position and data 
format of the protected data segment to ensure protected digital good is not 
tampered after it has been encrypted. 

In respect to claim 9, Yorke-Smith, Colberg and Howard disclose the 
method as recited in claim 8, wherein at least two of the segments overlap one 
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another (see Colberg, e.g. Abstract and col. 1, line 65-coL 2, line 10 (subset of 
code), loop subroutine or loop iteration commonly found in programming code 
contains some identical data, i.e. Fig. 20c, for (i=1,i<n,i++)...for (i=1,i<n,i++)) 

In respect to claim 10, York-Smith, Colberg and Howard disclose a 
method as recited in claim 8, Yorke-Smith further discloses wherein the selecting 
comprises randomly selecting the segments (see col. 4, lines 24-67). 

In respect to claim 1 1 , York-Smith, Colberg and Howard disclose a 
method as recited in claim 8, Yorke-Smith further discloses wherein the 
transforming comprises transforming the selected segments according to 
randomly chosen protection techniques (Yorke-Smith, col. 1, line 60-col. 2, line 
67) 

In respect to claims 13 and 14, Yorke-Smith, Colberg and Howard 
disclose a method as recited in claim 8. Colberg further discloses comprising 
receiving quantitative parameters indicative of how much the protected digital 
goods should be altered and wherein the transforming is performed to satisfy the 
quantitative parameters (see Colberg, Abstract, col. 1, line 65-col. 2, line 10). 

In respect to claim 15, Yorke-Smith, Colberg and Howard disclose a 
method as recited in claim 8. Colberg further discloses wherein the various 
forms of protection are selected from a group of protection tools comprising code 
integrity verification, acyclic code integrity verification, cyclic code integrity 
verification, secret key scattering, obfuscated function execution, 
encryption/decryption, probabilistic checking, Boolean check obfuscation, in- 
lining, reseeding pseudo random number generators with tune varying inputs, 
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anti-disassembly methods, varying execution paths between runs, anti- 
debugging methods, and time/space separation between tamper detection (see 
Colberg, Abstract and col. 1, line 65 to coL 2, line 10). 

In respect to claim 17, the claim limitation is a computer-readable medium 
claim which is substantially similar to method claim 8 and therefore the same 
rejection applied. 

In respect to claim 18, Yorke-Smith discloses a method comprising: 
parsing the digital into data segments (see Yorke-Smith, col. 3, lines 25-27); 

selecting at least one data segment (see col. 1, lines 53-55); augmenting 
the selected data segment to add protection qualities (see col. 1, lines 58-67); 
repeating the selecting and the augmenting for different data segments until the 
desired quantity of protection has been applied (see coL 1, lines 48-67). 

establishing parameters prescribing a desired quantity of protection to be 
applied to digital goods and augmenting the selected varies data segment to add 
protection qualities (col. 3, line 25-col. 4, line 15). 

Yorke-Smith does not explicitly disclose but Colberg discloses the 
protected data are software code. It would have been obvious to one of ordinary 
skill in the art at the time the invention was made to incorporate the teaching of 
Yorke-Smith's encryption system using multiple encryption techniques with 
Colberg's teaching of providing obfuscation technique for software program by 
determining and selecting subset of software codes for protection to enhance 
software security. Furthermore, Yorke-Smith and Colberg do not explicitly 
disclose the control block is configure to used to evaluate a validity of the 
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augmented segment. However, Howard discloses a ciphering processing 
system may includes a module for generating an integrity check information 
(Howard, col. 3, lines 1-23). It would have been obvious to one of ordinary skill in 
the art at the time the invention was made to incorporate integrity check in 
ciphering process taught by Howard with the teaching of Yorke-Smith using a 
control block as a checkpoint to indicate the position and data format of the 
protected data segment to ensure protected digital good is not tampered after it 
has been encrypted. 

In respect to claim 20, Yorke-Smith, Colberg and Howard disclose a 
method as recited in claim 18. Colberg further discloses wherein the augmenting 
comprises applying a protection technique selected from a group of protection 
techniques comprising code integrity verification, acyclic code integrity 
verification, cyclic code integrity verification, secret key scattering, obfuscated 
function execution, encryption/decryption, probabilistic checking. Boolean check 
obfuscation, in-lining, reseeding pseudo random number generators with tune 
varying inputs, anti-disassembly methods, varying execution paths between runs, 
anti-debugging methods, and timespace separation between tamper detection 
and response (see Colberg, Abstract and col. 1, line 65-col. 2, line 10). 

In respect to claim 22, the claim limitation is a computer-readable medium 
claim which is substantially similar to method claim 18 and therefore the same 
rejection applied. 

In respect to claims 23, the claimed limitation is substantially similar to 
claim 1 . Therefore, claim 23 is rejected based on the similar rationale. 
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In respect to claims 24, 28 and 36, the claim limitation are substantially 
similar to claim 5. Therefore, claims 24, 28 and 36 are rejected based on the 
similar rationale. 

In respect to claim 26, Yorke-Smith, Colberg and Howard disclose a 
production system as recited in claim 23, wherein the production server has a 
pseudo random generator to introduce randomness into the application of the 
protection tools to various portions of the original digital goods (see Yorke-Smith, 
col. 4, lines 23-67) 

In respect to claim 27, the claim limitation is substantially similar to claim 
23. Therefore, claim 27 is rejected based on the similar rationale. 

In respect to claim 29, the claim limitation is substantially similar to claim 
2. Therefore, claim 29 is rejected based on the similar rationale. 

In respect to claim 30, the claim limitation is substantially similar to claim 
26. Therefore, claim 30 is rejected based on the similar rationale. 

In respect to claim 31, Yorke-Smith, Colberg and Howard disclose a 
system as recited in claim 27, further comprising: a quantitative unit to specify a 
quantity of protection qualities to be added to the digital good (Colberg, Abstract 
and col. 1 , line 65-col. 2, line 1 0). 

In respect to claim 32, the claimed limitation is substantially similar to 
claim 1, Therefore, claim 32 is rejected based on the similar rationale. 

In respect to claim 33, the claim limitation is a computer-readable media 
claim which is substantially similar to method claim 23 and therefore the same 
rejection applied. 
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In respect to claim 34, Yorke-Smith, Colberg and Howard disclose one or 
more computer-readable media as recited in claim 33, Yorke-Smith further 
discloses comprising computer-executable instructions to randomly select the 
protection, tools from a set of available protection tools (see York-Smith, col. 4, 
lines 23-67), 

In respect to claim 35, Yorke-Smith, Colberg and Howard disclose one or 
more computer-readable media as recited in claim 33. Yorke-Smith further 
discloses comprising computer-executable instructions to apply the protection 
tools to randomly selected portions of the original digital goods (see Yorke-Smith 
col. 4, lines 23-67). 

5. Claim 19 is rejected under 35 U.S.C. 103(a) as being unpatentable over 
Yorke-Smith (U.S. Patent No. 5.548,648) and Colberg (U.S. Patent No. 
6,6668,325) and Howard (U.S. Patent No. 6,901 ,516) and further in view of 
Levit(U.S. Patent No. 5,420,942). 

In respect to claim 19, Yorke-Smith, Colberg and Howard disclose a 
method as recited in claim 18. York-Smith, Colberg and Howard do not explicitly 
disclose wherein the establishing comprises enabling a user to enter the 
parameters. However, Levit discloses allowing user manually entering parameter 
(see Levit, col. 8, line 67-col. 9, line 3). It would have been obvious to one of 
ordinary skill in the art at the time the invention was made to implement Yorke- 
Smith's encryption system that allow the user to enter the parameters for the 
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benefit of having user to decide what program data to be encrypted instead of the 
software to do the task. 

6. Claims 6, 16, 21 and 25 are rejected under 35 U.S.C. 103(a) as being 
unpatentable over Yorke-Smith (U.S. Patent No. 5,548,648) in view of Colberg 
(U.S. Patent No. 6,6668,325) and Howard (U.S. Patent No. 6,901,516) and 
further in view of Simmon et al. (U.S. Patent No. 6,507,868, hereinafter Simmon). 

In respect to claim 6, Yorke-Smith, Colberg and Howard disclose method 
as recited in claim 1. Yorke-Smith, Colberg and Howard do not explicitly disclose 
wherein the applying comprises applying a form of protection in which a 
checksum can be computed on a set of bytes of the digital goods without actually 
reading the bytes. However, Simmon discloses performing checksum on data 
packet (Simmon, col. 16, lines 63-67). It would have been obvious to one of 
ordinary skill in the art at the time the invention was made to implement the 
encryption system of Yorke-Smith, Colberg and Howard with testing the 
checksum taught by Simmon to ensure transmitted data has not been tampered 
during the transmission. 

In respect to claim 16, 21 and 25, the claimed limitation is similar to claim 
6. Therefore, claims 16, 21 and 25 are rejected based on the similar rationale. 



Conclusion 
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7. Any inquiry concerning this communication or earlier communications from 
the examiner should be directed to Tongoc Tran whose telephone number is 
(571 ) 272-3843. The examiner can normally be reached on 8:30-5:00. 

If attempts to reach the examiner by telephone are unsuccessful, the 
examiner's supervisor, Gregory Morse can be reached on (571) 272-3838. The 
fax phone number for the organization where this application or proceeding is 
assigned is 703-872-9306. 

Information regarding the status of an application may be obtained from 
the Patent Application Information Retrieval (PAIR) system. Status information 
for published applications may be obtained from either Private PAIR or Public 
PAIR. Status information for unpublished applications is available through 
Private PAIR only. For more information about the PAIR system, see http://pair- 
direct.uspto.gov. Should you have questions on access to the Private PAIR 
system, contact the Electronic Business Center (EBC) at 866-217-9197 (toll- 
free). 



Bkarrfiner: Tongoc Tran 
Art'0nit:2134 




August 6, 2005 




GREGORY MORSE 
SUPERVISORY PATENT EXAMINER 
TECHNOLOGY CENTFR 2ino 



